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USER’S  MANUAL  FOR  THE  SECURE  MILITARY  MESSAGE  SYSTEM 

M2  PROTOTYPE 

i 

Part  I:  User’s  Guide 


Introduetioa 

The  Secure  VGliUry  Message  System 
(MMS)  supports  composition,  transmission, 
receipt,  and  filing  of  military  messages.  It  is 
designed  to  control  the  access  that  users 
with  different  clearances  have  to  messages  of 
different  classifications.  Security  markings 
are  maintained  on  messages  and  message 
fields,  and  operations  are  permitted  only  if 
they  are  consistent  with  the  MMS  security 
model. 

This  manual  is  organized  in  two  parts: 
the  User’s  Guide  and  the  Reference  Manual. 
The  User’s  Guide  includes  a  discussion  of 
how  one  performs  various  tasks  using  the 
MMS,  followed  by  a  sample  session.  It  does 
not  cover  all  details  of  MMS  operations;  in 
particular,  security  officer  functions  are 
omitted.  The  Reference  Manual  is  provided 
for  the  more  experienced  user.  It  supplies 
tables  and  guides  for  quick  reference. 

Basic  Concepts 

The  electronic  world  of  the  system  pro* 
vides  analogs  for  familiar  objects  in  the  phy* 
sical  world.  There  are  three  concepts  basic 
to  the  system:  the  entity  hierarchy,  the  elec> 
tronic  mail  functions,  and  the  security 
enforcement. 

The  MMS  provides  an  environment  for 
file  management  similar  to  that  of  a  physical 
file  cabinet.  A  file  cabinet  contains  drawers, 
which  in  turn  contain  the  files  of  messages 
and  documents.  In  the  MMS,  you  will  have 
your  own  mcMsye  fil*  directory  analogous  to 
the  file  cabinet,  '^e  message  file  directory 
contains  mcMsye  files  that  in  turn  contain 
the  messsyee.  You  will  also  have  a  test  file 
iireetorj  that  contains  test  files.  The  foU 
lowing  diagram  illustrates  that  arrangement. 
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Messages  are  sent  and  received  in  a 
way  similar  to  conventional  mail  systems. 
The  send  operation  places  the  message  in 
each  recipient’s  iniez,  the  system’s  version 
of  the  mailbox.  The  recipient  can  then  read, 
store,  and  (if  permitted)  forward  the  me»> 
sage  to  others. 

A  message  is  either  /arms/  or  infermsl. 
Informal  messages  can  be  sent  by  any  user. 
Formal  messages  correspond  to  military 
communications  of  record.  They  are  usually 
sent  between  commands  rather  than  indivi* 
duals,  and  they  can  only  be  sent  by  desig¬ 
nated  individuals,  called  refesscrs. 
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The  MMS  security  model  governs  what 
actions  the  system  may  perform  on  your 
behalf.  This  model  is  based  on  the  same  pol¬ 
icy  that  controls  the  handling  of  classified 
paper  documents.  It  requires  that  a 
classification  be  associated  with  each  direc¬ 
tory,  file,  and  message  in  the  system  and 
that  these  classificationa  must  be  ordered  in 
the  MMS  entity  hierarchy  as  they  would  be 
in  the  physical  world.  For  example,  a 
Confidential  message  may  only  contain  fields 
at  that  security  level  or  below,  a  Secret  file 
must  only  contain  messages  at  that  security 
level  or  below,  and  a  Top  Secret  directory 
must  only  contain  files  at  that  level  or 
below.  The  MMS  protects  classified  informa¬ 
tion  by  checking  security  labeis  (eg.  (T),  (S 
nato))  associated  with  users  and  data  to 
determine  whether  a  requested  operation  is 
consistent  with  the  policy. 

Using  the  MMS 

Login  and  Logout 

During  the  login  sequence,  you  identify 
yourself  to  the  MMS  by  supplying  your 
asen'd  and  your  password.  Your  userid  is 
usually  your  last  name  (in  lower  case),  and 
also  serves  as  your  address  for  receiving  mes¬ 
sages.  Your  password  should  be  kept  private, 
so  that  it  is  known  only  by  you.  The  message 
system  accepts  it  as  proof  of  your  identity. 

The  screen  elMtfieation  you  choose 
limits  the  classification  of  ixiformation 
displayed  on  the  terminal  screen.  Only  data 
with  a  security  classification  that  is  less 
than  or  equal  to  that  of  the  screen  may  be 
displayed  on  it.  You  cannot  choose  a  screen 
classification  higher  than  your  clearance. 

Your  choice  of  rote*  determines  the 
operations  you  can  perform  with  the  MMS. 
Each  person  is  authorised  for  one  or  more 
roles.  At  login,  you  select  an  initial  set  of 
roles  for  the  current  session.  You  can  change 
this  selection  during  a  session. 

The  Uter  role  permits  you  to  perform 
normal  message  hanging  tasks.  Other  roles 
are  required  for  some  operations;  for  exam¬ 
ple,  the  Reieuer  role  is  required  to  send  a 
Formal  message,  and  the  Dovmgrtder  role  is 
required  to  lower  the  classification  of  text 


files  or  message  files. 

When  you  complete  a  session  with  the 
MMS,  you  /eyesl.  The  screen  is  cleared  and 
the  terminal  is  set  up  for  a  new  login. 

Reading  and  Filing  Mail 

Displaying  your  message  file  directory 
lists  all  of  your  message  files  and  their  secu¬ 
rity  classifications.  In  turn,  displaring  a  mes¬ 
sage  file  lists  an  entry  for  each  message 
currently  in  that  file.  The  message  entry 
shows  the  message’s  sender,  subject,  type, 
and  classification.  The  entry  is  marked  (N) 
if  it  is  new,  and  (D)  if  it  has  been  deleted, 
and  its  date-time-group  (DTG)  is  shown. 
The  DTG  is  a  unique  identifier  for  a  mes¬ 
sage,  composed  of  the  date  and  time  of  its 
creation  and  the  site  where  it  was  created.  If 
a  message’s  classification  is  greater  than  the 
current  screen  classification,  its  entry  will 
show  only  the  DTG. 

To  view  a  specific  message,  use  the 
DitfUg  command,  supplying  either  the  file 
name  and  message  number  within  the  file  or 
by  specifying  its  DTG.  A  hard  copy  of  the 
message  can  be  produced  with  the  Print 
command. 

The  Crette  Me§$age  FUe  command 
adds  a  new  message  file  to  your  directory; 
you  designate  its  name  and  classification. 
Sometimes,  observing  a  collection  of  mes¬ 
sages  at  one  security  level  (say,  Confidential) 
may  permit  a  user  to  infer  more  sensitive 
information  (say.  Secret).  Tbis  is  called  the 
aggregation  problem.  To  help  you  deal  with 
this  problem,  the  MMS  allows  you  to  restrict 
a  message  file  so  that  even  though  another 
user  is  cleared  to  read  individual  messages  in 
that  file,  he  is  not  permitted  to  do  so  unless 
his  clearance  is  at  least  equal  to  the 
classification  of  the  file  as  a  whole.  To 
impose  this  discipline  on  a  message  file,  it 
must  be  designated  Container  Clearenee 
Reqnired  (CCR)  when  it  is  created.  Thus,  a 
file  of  aggregation-sensitive  Confidential 
messages  might  properly  be  created  as 
Secret  CCR. 

The  Cofg  and  Move  commands  are 
used  to  move  messages  between  files.  Copy 
causes  a  message  to  appear  in  a  new  file. 
The  two  files  will  share  the  same  message: 
changing  one  copy  changes  the  other.  Move 
is  like  Copy,  except  that  Move  deletes  the 


copy  of  the  meaeage  in  the  file  it  was  moved 
from.  A  deleted  meaeage  can  be  retrieved 
with  the  Unidett  command.  The  Expnnft 
command  removes  all  deleted  messages  from 
the  file  and  destroys  them. 

Composing  Messages 

The  Cres/e  Mestaft  command  invokes 
the  message  editor,  which  displays  a  skeleton 
message  made  up  of  several  fields.  To  com¬ 
pose  the  message,  move  the  cursor  to  the 
desired  fields  with  the  arrow  keys,  and  enter 
the  appropriate  information.  Three  of  the 
fields  (From,  Security,  and  Originator) 
appear  above  a  bar  on  the  screen;  these 
fields  are  unalterable. 

The  text  field  of  a  message  has  an 
overall  classification  (initially  set  to  that  of 
the  message),  but  you  must  also  enter  an 
explicit  classification  for  each  paragraph 
within  the  text  field,  including  the  first.  To 
create  a  new  paragraph,  press  the  Make  New 
Paragraph  function  key.  You  will  be 
prompted  to  classify  the  paragraph  before 
typing  the  text. 

You  can  correct  an  error  by  positioning 
the  cursor  just  after  the  error,  backspacing 
over  it,  and  typing  the  correction,  or  you 
may  use  the  function  keys.  The  Undo 
operation  undoes  the  last  command  you 
gave,  and  then  prompts  you  to  decide 
whether  you  want  to  undo  more. 

When  you  are  satisfied  with  the  edited 
message,  select  Finiahed  Editing  and  Update. 
The  MMS  will  then  check  the  syntax,  check 
that  the  classification  of  each  message  field 
is  less  than  or  equal  to  that  of  the  message 
as  a  whole,  and  report  any  faults.  These 
must  be  corrected  before  the  message  can  be 
updated. 

To  end  an  editing  session  withomt  sav¬ 
ing  the  changes,  select  Finished  Editing  and 
Abort.  The  message  will  not  be  updated. 

When  you  Edit  a  message,  the  message 
is  put  back  into  the  message  editor,  where 
you  can  make  the  necessary  changes  using 
the  same  techniques. 

Sending  and  Forwarding  Messages 

Send  makes  a  copy  of  the  message 
appear  in  the  inbox  of  each  recipient,  and 
changes  the  Draft  mark  on  the  message  to  a 


Sent  mark.  Only  Draft  messages  may  be 
sent.  To  send  a  Formal  message,  you  must 
have  Releaser  as  a  current  role. 

Forward  delivers  a  copy  of  the  message 
to  specified  addressees  with  a  tag  attached, 
marking  the  message  for  Action,  Informa¬ 
tion,  Release,  or  Coordination. 

Replg  is  like  Create  Message,  except 
that  the  To  and  Subject  fields  are  automati¬ 
cally  filled  in  with  the  From  and  Subject 
fields,  respectively,  of  the  message  to  which 
you  are  replying. 

Send  and  related  commands  are 
located  in  the  Send  Meuage  Menn,  which 
can  be  selected  by  pressing  the  correspond¬ 
ing  function  key. 

TextFUea 

A  text  file  is  a  list  of  paragraphs,  like 
the  text  field  of  a  message.  It  can  be  used  to 
store  or  edit  text  fields  or  other  message 
fields  (for  example,  address  lists  from  To  or 
CC  fields)  as  well.  It  is  composed  and  edited 
in  the  same  manner  as  a  text  field.  Your  text 
file  direetorg  contains  all  of  your  text  files, 
which  you  refer  to  by  name. 

Operations  (selected  from  the  Copy  and 
Duplicate  Menu  )  are  provided  for  copying 
message  fields  into  text  files  and  vice  versa. 
When  a  text  file  is  deleted,  it  cannot  be 
recovered. 

Porxniaaiona 

By  default,  none  of  your  messages  can 
be  read  or  edited  by  anyone  else.  Sharing  a 
message  with  others  can  be  accomplished  by 
changing  the  permissions  on  a  particular 
message. 

Each  message,  message  file,  text  file, 
and  directory  has  a  set  of  permissions  that 
defines  the  commands  each  person  can 
invoke  on  that  entity.  Initially,  only  the 
owner  has  any  permissions.  One  of  these 
permissions  allows  him  to  edit  the  permis¬ 
sions  of  his  files  to  provide  others  with  access 
to  his  data.  He  can,  for  example,  allow 
another  person  to  read  a  particular  message, 
or,  if  he  is  working  jointly  on  a  message,  he 
can  grant  co-authors  editing  permissions. 
The  other  persons  must  still  have  proper 
clearances  to  have  access  to  classified  data. 


The  Show  PermiU  end  Ch*%§t  Ptr- 
Mute  comnunds  are  located  in  the  5ce«rtty 
Meiie,  which  can  be  selected  by  pressing  the 
appropriate  function  key.  Show  Permits 
displays  the  permissions  of  the  specified 
object  on  the  screen  as  a  table  with  users 
along  the  top  and  commands  down  the  side. 
A  permission  is  either  yes  {%)  or  no  (-). 
Print  PermiU  sends  the  permission  table  to 
the  printer. 

The  Chnnge  PermiU  command  allows 
you  to  edit  the  table.  Use  the  arrow  keys  to 
position  the  cursor  at  the  appropriate  entry, 
and  click  the  space  bar  to  make  the  change. 
If  the  entry  was  ‘no’,  it  will  change  to  ‘yes’, 
and  vice  versa.  When  you  have  finished, 
either  update  or  abort  the  edit. 

Further  Details 

The  best  way  to  develop  an  under¬ 
standing  of  the  MMS  is  to  experiment  with 
it.  The  following  sample  session  presents  the 
message  system  pictorially  for  an  introduc¬ 
tory  walk-through.  The  Reference  Manual 
contains  a  listing  of  other  useful  commands, 
describes  the  editor  in  more  detail,  and 
closes  with  a  bibliography  of  related  MMS 
project  papers. 


A  Short  Scenario 

The  purpoee  of  thk  acenaiio  is  to  provide  new  users  with  sn  idea  of  how  the  MMS  operates, 
hi  this  example,  a  user  logs  into  the  message  sjrstem,  reads  an  ineoming  message,  files  it,  snd  com* 
poses  and  sends  a  reply.  We  will  monitor  his  progress  by  means  of  snap  shots  ot  the  terminal 
screen.  The  screen  images  will  be  bounded  by  lines. 

Tho  Login  Soq[a«ncs 

To  gain  access  to  the  MMS,  the  user  (Ben  Franklin)  must  first  authenticate  his  identity  to 
the  system  by  logging  in.  He  does  this  by  supplying  his  vserid  (franklin)  and  his  putword  (not 
echoed)  to  the  login  prompt.  He  then  selects  a  ecrcen  elastifieotion  (Top  Secret  white)  and  a  role 


User*unidentifiede  SMMS  M2  Prototype  Screen:(U) 
Login:  franklin  TOP  SECRET  white  User 

Checking  login  permissions... 


The  system  then  checks  the  login  permissions.  Upon  a  valid  login,  Franklin  has  access  to  the 
message  system’s  resources. 

Tho  Inbox 

Initially,  the  screen  shows  the  display  of  Franklin’s  inbox.  Listed  here  are  the  meooofe 
enirieo  for  messages  currently  in  this  meatage  file.  The  message  entry  shows  the  message’s 
sender,  subject,  type,  and  security  classification.  NoUce  that  Franklin  can  not  see  the  message 
entry  for  message  #1.  The  reason  for  this  is  that  the  message  classification  exceeds  that  of  the 
screen.  Commands  for  the  message  system  that  are  invoked  by  pressing  the  number  keys  are 
listed  in  the  menu  on  the  screen.  Other  commands  are  issued  with  the  function  keys. 
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PRINT 

Msg/File/ 

Text 


Welcome  to  Ml  prototype  message  sysum 
1  N  CC091448AUG75 

2(Swhite)N  CC110412AUG75  Formal  Sent 
From:(U)  roes 

Subject:(U)  About  Ben  Amdd 

3  (S)N  CC131423AUG75  Informal  Sent 
From:(U)  hancoek 
Subjeet:(U)  Adam’s  latest  excuse 


T/'f/'fV 


I 


W 


*=?L*^'  fc' 


ta  .»t  .*m 


Raading  ftMaasg* 

Franklin  can  read  his  mail  by  using  the  Ditpitf  command.  As  a  result,  the  message  he 
choose  is  displayed  on  the  lower  half  of  the  screen,  and  the  system  is  ready  for  another  command. 


Userfranklin  SMMS  M2  Prototype  Screen:(T  white) 
Choose  command  from  menu  or  from  function  key  overlay 


Userfranklin  SMMS  M2  Prototype  Screen:(T  white) 
Choose  command  from  menu  or  from  function  key  overlay 
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Compodm  a  M— 

Now  Franklin  wants  to  write  a  letter  to  George  Washington  on  the  subject  of  Ben  Arnold's 
behavior.  He  uses  the  Create  command  (2)  to  make  an  informal  message  with  a  security 
classification  of  ‘SECRET  white'  in  his  message  file  rumors.  The  message  system  places  him  in  the 
message  editor,  where  he  simply  fills  in  the  various  message  fieUa ,  and  writes  the  body  of  the 
message  in  the  Text  field.  Notice  that  the  text  field  has  the  same  classification  that  he  assigned  to 
the  message. 


Security:(S  white) 

From:(U)  franklin 
Originator:(U)  CC 
Meaeage  Claaaifieation:  S  white 
To:(U)  Washington 
Cc:(U)  roes 

Subjeet:(U)  Ben  Arnold 
Text:(S  white) 

(S  white)  Betsy  has  reinforced  my  suspicions  of  Arnold 
by  bringing  to  my  attention  rumors  of  treason  that 
are  connected  to  him.  I  know  that  rumors  can  be  concocted 
by  idle  minds,  but  I  believe  that  there  is  some  substance 
to  these.  To  my  eyes,  his  behavior  warrants  close  inspection. 

(S  white)  Please  consider  a  formal  investigation  on  this 
case  •  the  lives  of  our  countrymen  are  at  stake. 

SMMS  Meaaage  Editor 

When  the  message  is  complete,  he  presses  the  Update  key  (fS)  and  the  MMS  checks  the  mes¬ 
sage  syntax  and  security  hierarchy.  If  these  checks  succeed,  the  message  is  written  to  the  file,  as 
shown  below. 


Userfranklin  SMMS  M2  Prototype  Screen:(T  white) 
Choose  command  from  menu  or  from  function  key  overlay 


1  (S  white)N  CC110412AUG75  Formal  Sent 

From:(U)  ross 

Subject:(U)  About  Ben  Arnold 

2  (S  white)N  CC162345AUG75  Informal  Draft 

From:(U)  franklin 
Sobjeet:(U)  Ben  Arnold 


Now  tkat  Um  mMMge  is  written,  Franklin  wants  to  mail  it.  He  selects  the  Sand  Measage 
Sdann  from  the  function  kejr  oireriay.  A  new  menu  appears  on  the  screen. 


User;fraaklin  SVIMS  M2  Prototype  Screen:(T  white) 


Choose  command  from  menu  or  from  function  key  overlay 


1 

2 

3 

4 

5 

6 

7 

Send 

Reply 

Readdresa 

Forward 

Forward 

Forward 

Forward 

Message 

to 

Message 

Message 

Msg  for 
Action 

Msg  for 
Info 

Msg  for 
Coord 

Msg  for 
Release 

1  (S  whitejN  CC110412AUG75  Formal  Sent 

From:(U)  ross 

Subject:^)  About  Ben  Arnold 

2  (S  white)N  CC162345AUG75  Informal  Draft 

From:(U)  franklin 
Subject:(U)  Ben  Arnold 


He  invokes  the  Send  maaaafe  command,  and  the  message  is  sent  to  Washington’s  and 
Ross’s  inboxes.  The  message  file  is  updated  to  show  that  the  Draft  mark  on  the  message  has 
changed  to  a  Sent  mark. 

Logout 

Franklin  has  finished  this  session  with  the  MMS  and  presses  the  Logout  key.  The  terminal  is 
now  ready  for  a  .  login. 
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Pvt  H:  Reference  Mmnual 


A  List  of  Commands  by  Menu 

These  menus  list  commands  invoked  by  pressing  the  number  keys  on  your  terminal.  The 
different  menus  are  selected  by  pressing  the  corresponding  function  key. 

Main  Menu 


1 

DISPLAY 

2 

CREATE 

3 

DELETE/ 

4 

COPY 

5 

MOVE 

SISB 

mm 

8 

PRINT 

Msg/File/ 

Msg/File/ 

UNDEL- 

Msg 

Msg 

File 

Msg/File/ 

Text/Dir 

Text 

-ETE 

■■1 

Text 

1.  Diapiiijf  prints  a  message,  text  file,  message  file,  or  directory  on  the  screen. 

2.  Create  is  used  to  compose  new  messages,  text  files  and  message  files. 

3.  Delete/  Undelete  allows  the  removal  of  messages,  text  files,  and  message  files.  Deleted  messages 
are  marked  with  a  D,  and  remain  in  the  message  file  until  the  file  is  expunged.  Deleted  messages 
can  be  recovered  if  they  are  undeleted  before  the  file  is  expunged.  This  is  not  true  with  text  files 
or  message  files  —  once  they  are  deleted,  they  are  irrevocably  destroyed. 

4.  Copy  Meeeage  makes  a  duplicate  of  a  message  and  places  it  into  a  target  message  file.  The 
two  messages  are  tied  together  •  if  a  change  is  made  in  one  of  them,  the  other  changes  also.  See 
also  DnpHeate  an  Object  in  the  Copp  and  Daplieate  Menu  . 

5.  Move  Meeeage  is  like  Copf  Meeeage,  except  that  it  marks  the  original  message  deleted. 

9.  Expunge  Meeeage  File  causes  all  deleted  messages  in  the  specified  message  file  to  be  irreversi* 
bly  destroyed.  Only  prior  to  an  expunge  can  deleted  messages  be  undeleted. 

7.  Edit  allows  the  user  to  make  changes  to  messages  and  text  files. 

8.  Print  is  similar  to  Display,  except  that  the  output  is  sent  to  the  hard  copy  printer  instead  of 
the  screen.  The  printer  marks  the  security  level  of  the  object  at  the  top  and  bottom  of  each 
page. 


Send  Message  Menu 


1 

2 

3 

4 

5 

6 

7 

Send 

Reply 

Readdress 

Forward 

Forward 

Forward 

Forward 

Message 

Co 

Message 

Message 

Msg  for 
Action 

Msg  for 
Info 

Msg  for 
Coord 

\fag  for 
Release 

1.  Send  Meeeage  converts  a  draft  message  to  a  sent  message  and  places  a  copy  of  the  sent  mes¬ 
sage  in  each  addressee’s  inbox.  Any  User  may  send  a  draft  informal  message,  but  <mly  a  person 
with  the  Releaser  role  may  send  a  draft  formal  message  (see  Forward  for  Release). 

2.  Replp  Meeeage  is  similar  to  Create  Meeeage,  but  the  Reply  function  fills  in  the  To  and  S%b~ 
jeet  fields  of  the  message  with  the  From  and  Subject  fields  of  the  message  being  replied  to. 

3.  Readdreee  Meeeage  makes  a  draft  copy  of  the  specified  sent  message  and  allows  you  to 
change  the  address  list.  Only  formal  messages  can  be  readdressed. 
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4.  Fwwtri  Mtuaft  for  Aeh'on  delivers  a  copy  of  the  sent  message  to  each  person  specified  in  the 
command  and  ma^  each  new  message  entry  with  ‘New’  and  ‘for  Actira’  tags. 

5.  Forword  Jt/essefs  for  luformotion  delivers  a  copy  of  Ute  smt  message  to  each  person  specified 
in  the  command  and  marks  each  new  message  entry  with  ‘New’  and  ‘for  Info’  tags. 

6.  Forword  Mootofo  for  Coor^notun  delivers  a  copy  of  the  draft  message  to  each  person 
specified  in  the  command  and  marks  each  new  message  entry  with  ‘New’  and  ‘for  Coordination’ 
tags. 

7.  Forword  Mtooogo  for  Reieooe  delivers  a  copy  of  the  draft  message  to  a  specified  person  and 
marks  the  recipient’s  message  entry  with  ‘New’  and  ‘for  Relewe’  tags.  The  addressees  must  have 
the  Relesser  role.  Only  draft  formal  messages  can  be  forwarded  for  release,  and  only  a  Releaser 
may  send  a  formal  message.  The  addressee  may  send  the  message. 


Copy  and  Duplieato  Menu 


1 

2 

3 

4 

WBM 

S 

CPY  Field 

CPY  Field 

CPY  Text 

CPY  Text 

Duplicate 

to  Text 

to  Text 

to  Field 

mgil 

an 

by  DTG 

by  MF 

object 

1.  Copy  Field  to  Text  by  DTG  appends  the  specified  message  field  from  a  message  referred  to  by 
date-time-group  (DTG)  to  a  text  file. 

2.  Copy  Field  to  Text  by  MF  appends  the  specified  field  in  a  message  referred  to  by  message  file 
and  number  to  a  text  file. 

3.  Copy  Text  to  Field  by  DTG  copies  the  contents  of  a  text  file  to  the  specified  message  field  in  a 
message  referred  to  by  DTG. 

4.  Copy  Text  to  Field  by  MF  copies  the  contents  of  a  text  file  to  the  specified  message  field  in  a 
message  referred  to  by  message  fide  and  number. 

5.  Doplieote  on  Object  creates  a  duplicate  of  a  message,  text  file,  or  message  file.  Unlike  the  Copy 
command  of  the  Main  Menu,  the  duplicate  message  is  not  linked  to  the  original  message.  A  dupli¬ 
cate  of  a  text  file  is  also  independent  of  the  original.  In  the  case  of  a  duplicate  message  file,  the 
messages  contained  in  the  original  file  are  copied  to  the  duplicate  file.  The  duplicate  messages  are 
linked  to  the  original  messages,  like  with  the  Copy  command. 


Soeurity  Menu 


REcLtSS. 

2 

3 

■EH 

5 

6 

8 

SHOW 

CHANGE 

CHANGE 

CHANGE 

PRINT 

Text/FUe/ 

Term 

Permits 

Permits 

User 

Role 

Password 

1.  Reeloeeify  allows  you  to  change  the  classification  labels  of  message  files,  text  files,  or  the  ter¬ 
minal  (screen  classification).  The  new  classification  must  still  dominate  that  of  the  contents  of 
the  reclassified  entity.  You  may  raise  or  lower  the  screen  classification,  but  unless  Downgrader  is 
one  of  your  current  roles,  you  may  only  raise  the  classification  of  message  files  and  text  files. 

2.  Show  Permits  displays  which  commands  others  may  invoke  on  the  specified  entity. 

3.  Ckonye  Permits  enables  you  to  allow  or  disallow  others  to  invoke  particular  commands  on 
the  specified  entity. 

4.  Show  User  Informotion  displays  a  user’s  clearance,  authorised  roles  (with  current  roles 
starred  *),  and  terminal  name.  You  must  have  SSO  as  a  current  role  to  show  information  about 
users  other  than  yourself. 


5.  U$€r  R»i*  aQowa  you  to  modify  your  currunt  roles. 

8.  Ckmn§*  Pastword  replaces  your  old  password  with  a  new  one  of  your  choice.  It  requires  that 
the  current  password  first  be  entered  eonectly. 

7.  5ll«w  TarmtHMl  Information  displays  the  maximum  and  the  current  screen  classification  of  a 
specified  terminal. 

8.  Print  Permits  is  like  Show  Permits,  except  that  the  output  is  sent  to  the  hard  copy  printer 
instead  of  the  screen. 


Security  Officer  Menu 


1 

3 

4 

HBM 

6 

1 - 7  1 

8 

CREATE 

CHANGE 

CHANGE 

CREATE 

CHANGE 

New 

User 

User 

User 

New 

Terminal 

Terminal 

User 

mm 

Clearance 

Roles 

Terminal 

Classif 

Note:  these  commands  can  only  be  invoked  when  SSO  is  one  of  your  current  roles. 

1.  Create  New  User  creates  a  new  user  for  authorised  use  of  the  MMS.  This  requires  that  a 
userid,  clearance,  password,  and  authorised  role  set  be  specified.  The  system  then  creates  an  mes> 
sage  file  directory,  text  file  directory,  and  inbox  for  the  new  user. 

2.  Remove  User  removes  a  user  from  authorised  use  of  the  MMS  and  destroys  the  associated 
directories  and  any  text  files,  message  files,  and  messages  that  are  solely  in  those  directories. 

3.  Change  User  Pauword  changes  a  user’s  password.  Unlike  the  Change  Password  command  of 
the  Security  Menu,  the  current  password  is  not  required. 

4.  Ckange  User  Clearance  changes  a  user’s  clearance. 

5.  Ckan§e  User  Roles  adds  or  removes  a  role  from  a  user’s  authorised  role  set. 

6.  Create  New  Terminal  adds  a  terminal  to  the  list  of  terminals  permitted  to  access  the  MMS. 

7.  Remove  Terminal  removes  a  terminal  from  the  list  of  terminab  permitted  to  access  the  MMS. 

8.  Chanje  Terminal  Classifieation  raises  or  lowers  the  maximum  screen  classification  for  a 
specified  terminal. 


Function  Key  OverUys 

The  function  keys  on  your  terminnl  invoke  speeini  operntions  for  selecting  commnnd  menus 
And  nmintAining  the  dispisy  window.  When  you  ere  working  with  the  editor,  these  keys  sre 
redefined  with  specinlised  eating  eomniAnds. 

Most  of  the  commands  are  self*explanatory,  many  are  the  same  in  both  the  message  sys¬ 
tem  and  the  editor.  Each  terminal  type  has  its  own  overlay,  so  be  sure  to  use  the  appropriate 
one. 

lUgMit  40,  Regent  M 


M2  Function  Keys 

Uu  fwetion  ktft  for  cemmende  tkottn  kert  on  tower  row 
Uae  SHIFT  4  ftmetio*  ktfo  for  eommondo  tkow*  here  on  upper  row 
Uoe  digit  kego  for  eommondo  shown  on  screen 


SCROLL 

LARGE 

SCROLL 

LARGE 

1  SCROLL 
SMALL 

SCROLL 

SMALL 

SSSB 

KM 

LOGOUT 


Main 

Security 

Menu 

Menu 

M2  Function  Keys  -  in  Message  Editor 

Use  function  kegs  for  eommondo  shown  here  on  tower  row 
Use  SHIFT  +  function  kegs  for  eommondo  shown  here  on  upper  row 
Use  arrow  kegs  to  moot  cunor 


SCROLL 

LARGE 

LARGE 

SCROLL 

SMALL 

SCROLL 

SMALL 

1  F2 

_ ca _ L 

M2  Function  Keys 

Use  function  kegs  for  eommondo  shown  here  on  tower  row 
Uu  SHIFT  •¥  function  kegofor  eommondo  shown  hers  on  upper  row 
Uu  digit  kegs  for  eommondo  shown  on  sereen 


SCROLL 

LARGE 

SCROLL 

LARGE 

SCROLL 

SMALL 

SCROLL 

SMALL 

LOGOUT 


Main 

Security 

Menu 

Menu 

M2  Function  Keys  —  in  Message  Editor 

Uu  function  kegofu  eommondo  ohown  hue  on  lowu  row 
Uu  SHIFT  -f-  function  kegofu  eommondo  ohown  hue  on  uppu  row 
Uu  orrow  kegs  to  mou  eurou 


Undo 

Command 

SCROLL 

LARGE 

SCROLL 

LARGE 

ABORT 

SCROLL 

SMALL 

SCROLL 

SMALL 

Move 

FVd 

More 

Back 

Delete 

C^ 

Delete 

Word 

.2 


I 


I 


h*. 


k> 
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Editor  Commando 


M«Maa«  E^tor 

The  funetioa  key  eonunends  ue  given  below.  Most  of  them  ere  self*explnnntory,  mnny  are 
the  same  in  the  meange  system  and  in  the  editor. 


UeeS 

M2Fv 

7ee  fvnetion  k 
HIFT  -r  fvnct 
f 

inction  Keys  —  in  Message  Editor 

tgefor  cemmeadt  eAewa  here  en  lower  row 
on  ktgefor  cemmende  shewn  here  on  upper  row 
lee  arrow  kege  to  move  cureor 

Undo 

Command 

SCROLL 

LARGE 

BACK 

SCROLL 

LARGE 

FWD 

Move 

Fwd 

Field 

Move 

Back 

Word 

Move 

Fwd 

Word 

Finished 

Editing 

Abort 

ABORT 

SCROLL 

SMALL 

BACK 

SCROLL 

SMALL 

FWD 

REDRAW 

SCREEN 

Delete 

Char 

Delete 

Word 

■gSSSI 

_ El _ 

F2 

F3 

F5 

_ Efi _ 

_ EZ _ 

F8  1 

Olhcr 

CONTROI^A 

CONTROL-E 

ESCAPE-n 

ESCAPE-« 

ESCAPE-r 

ESCAPE-] 

ESGAPE-< 

ESCAPE-> 

CONTROL-K 

CONTROL-Y 

CONTROL'S 

CONTROL-R 

ESCAPE-R 

ESCAPE-^ 

ESCAPE-J 

CONTROL-O 

CONTROL-T 

ESCAPE-SmFT-Fa 

ESCAPE-SHIFT-FS 

CONTROL-Q 

CONTROL-X-CONTROL-I 

ESCAPE-r 

ESCAPE-x 


Afeec  career  to  befinninf  of  current  line 

Move  cureor  to  end  of  current  line 

Move  career  iuekwurd  iy  ene  eentonce 

Move  cureor  forvturd  iy  ene  eentenee 

Move  cureor  iuekward  if  one  pareyrepA 

Move  career /erwerd  if  ene  psrcyrepA 

Move  career  to  ieginning  of  meeeege 

Move  carter  to  end  of  meeeege 

Delete  (kilt)  from  career  to  end  of 

current  line,  eeving  tout  in  efeeiel  iuffer 

Jnecri  (furdt)  text  eeved  in  epeeiel  iuffer 

Seerek  for  e  etring,  forwerd  from  the  cureor  poeition 

Seerek  for  e  etring,  ieekwerd  from  the  career  poeition 

Gloial  repleee  one  etring  with  another 

GMel  repleee  one  etring  with  another,  iut 

eei  individuellf  whether  each  oeeurrenee  ehould  ie  replaced 

Juetiff  (Ae  earreii<  paragraph 

Make  a  Hank  line  aiove  current  line 

Tranepoee  the  two  eharaetere  immediatelf  iefore  the  career 

SeroU  the  header  window  iaekwarde 

Scroll  the  header  window  forward 

Quote  next  eharaeter  (to  ineert  a  control  or 

other  epeeiel  eharaeter  into  year  text) 

Ineert  the  eontente  of  s  Unix  file  into  year  mceeeye 
Seareh  KWIC  index  of  all  emaee  cemmende 
Eseeato-estcndcd-eeinmsiid  (for  hard-eore  emaee  aecrs  onlf) 
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The  “Undo”  key  undoes  the  last  command  you  gave,  then  asks  if  you  want  to  undo  the 
next-to-the>last,  etc.  Type  a  space  to  cwtinue  undoing  or  a  carriage  return  to  stop  undoing. 

All  function  keys  have  synonyms  defined  for  terminals  that  don’t  have  these  keys,  but  they 
are  less  convenient  to  use.  Function  key  N  can  also  be  entered  as  ESCAP&N.  The  arrow  keys 
can  be  entered  as  ESCAP&U,  D,  L,  and  R,  for  up,  down,  left,  and  right. 

ParmiMhmn  Editor 

The  Permimions  Editor  is  a  limited  vernon  of  the  Message  Editor.  The  only  keys  you  need 
are  the  arrows  for  positioning  the  cursor,  the  scrolling  function  keys,  the  edit  abort  and  update 
keys,  and  the  space  bar  for  turning  permissiona  w  or  off. 
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Error  Messafea 

This  section  provides  sdditionnl  explsiantion  of  error  mesenges  you  may  encounter  in  your 
use  of  the  MMS.  Most  error  messages  are  generated  by  the  precondition  checker.  Once  a  syntacti* 
cally  correct  command  has  been  constructed  using  dte  menu  interface,  it  is  passed  to  the  precon¬ 
dition  checker,  which  determines  whether  w  not  die  command  can  be  executed.  Both  security 
constraints  (is  the  message  to  be  displayed  classified  at  or  below  the  level  of  the  terminal  screen?) 
and  other  operational  constraints  (dties  the  requested  message  file  exist?)  are  checked. 

Two  of  the  error  messages  are  generated  by  the  editor.  Before  a  message  is  updated,  it  is 
checked  for  proper  syntax  and  security  hierarchy.  The  errors  must  be  corrected  before  the  text  file 
or  message  can  be  updated. 

The  same  error  messages  can  be  evoked  by  many  difierent  commands.  The  error  messages 
are  listed  alphabetically  below,  along  with  an  explan^on  of  probable  causes  and  remedies  for 
special  cases.  Key  words  and  abbreviations  used  in  the  messages  are  explained  in  the  next  sec¬ 
tion. 

action_addreas_)ist_empty 

No  addreoteet  were  given  to  the  Forword  for  Action  eommond. 

action_addressee_clearance_does_jiot_dominate_msg_elaaaification 

A  tor  action  eddreeeee  ie  not  eleored  for  Ikie  mesooge.  Tie  meeooge  woo 
forworded  to  no  one. 

addre8see_does.jiot_have_releaaer_role 

A  for  release  eddreeeee  ie  not  on  entkorixed  releaser.  Tie  meeeoge  woe 
forworded  to  no  one. 

eannot_append_paragraphJist_tojparagraph 

Tie  Subject  field  or  erngfe  porogrofk  test  file  eon  onig  eontoin  o  eing/e 
porogropk.  yon  ottemptod  to  oppend  o  porogropk  liet  to  it 

eaanot_rcmove_your_only.currentjrole 

Eoek  person  must  kovo  ot  leoet  one  rote  esrren/  wken  logged  in. 

ean_only_append_addreas.to_addreas 

Porogropke  eonnot  io  copied  to  oddreee  fields.  Address  meeeoge  fields  (To,  Ce) 
esn  onlp  eontoin  oddreeeee. 

cc_field_addreaoee_clearance_does_|iot_dominate_msg_claasification 
0ns  of  tko  oddreeeeoe  in  tke  Ce  field  ie  not  eleored  to  receive  tkie 
meeeoge.  Tke  meeeoge  uws  sent  to  no  one.  Edit  tke  meeeoge  oppropriotelg. 

clearance.does_not.dominate_dir_claasification 
ybn  srs  no<  eleored  to  print  tkie  direetorp. 

clearance_does_not_dominate.entity.clasai&ation 

Ton  ore  not  eleored  to  dieptog  or  print  tke  permieeione  on  tkie  entity. 

elearanee_does_pot_dominate_msg_elaasification 

Yon  ore  not  eleored  to  print  or  dieplog  tkie  meeeoge. 

elcaranee_does_not_dominate_msg_file.elaosification 

Yon  ore  not  eleored  to  print  o  moeeoge  file  of  tkie  eloeeifieotion. 

elcarance_doesjBot.doniinate_|iew_pisg,Jle_elaasification 


Yom  eammct  eresie  or  recioooify  a  moooofo  fit*  oiovt  your  eUoronco  UooL 

el«anace_do«.,jMi_doauii»(e_|Mw_teniiinai_cUMifieatioQ 
Yo%  cannot  reelaaoify  the  Urminai  akooa  fomr  clearance  level. 

eleanace_<ioca_not_<ioiiuiiate_new_tfile_elasnfication 

Yon  cannot  reelaooify  or  create  a  text  file  above  fonr  clearance  level. 

elearMice_<lo«a_no(_<k>miaate_tfile.elaaaificatioa 
Yon  are  not  cleared  to  dieplap  or  print  tkio  text  file. 

eleanDce_do«8_iK)(_doiniiia(e_tfile_dir_elaanfiestioQ 
Yon  are  not  cleared  to  print  tkio  directory. 

container_elevance_required_for_msg_file 

Tkio  file  M  CCR.  Yon  mnet  be  cleared  at  least  to  tke  level  of  tkio  file  to 
access  any  messayes  contained  in  il. 

coordinatioa_ad<ire9aee_clearaace.does_not_doininate_insg_claa8ification 
A  for  eoordinAtion  addressee  is  not  cleared  to  receive  tkio  messaye.  It 
was  forwarded  to  no  one. 

<iir_claasifieatiaa.<loe3_pot_<loiiuiiatc_petr_iDsg_file_clu8ificktioa 

Yon  cannot  reclassify  or  create  a  messaye  file  at  a  level  tkat  is  not  less  tkan 
or  eqnal  to  tkat  of  tke  eontaininy  directory. 

dir_cla88ificatioo.does^o(_domiiiste_nug_file_claa8ification 

Tke  classification  of  tke  dnplieate  messaye  file  mnst  be  less  tkan  or  eqnal  to 
tkat  of  tfce  intended  eontaininy  directory. 

directorjr.doesjDot.exist 

Tkere  is  no  directory  witk  tke  specified  name.  Cheek  tke  spelliny. 
downgrader_role_required 

Yon  m««(  have  downgrader  as  one  of  yonr  enrrent  roles  to  lower  tke  elassifieation 
on  a  text  file  or  messaye  file.  Add  downgrader  as  a  enrrent  role  (if  entkorixed). 

field_eiaarification_does_not.doiiiinat«_tfil«_clasBificatioo 

The  elassifieation  of  tke  messaye  field  yon  are  eopyiny  to  mnst  be  yreater  tkan 
or  eqnal  to  tkat  of  tke  text  file  yon  are  eopyiny  from. 

file_naine_already_exiata 

Tkere  is  already  a  file  in  this  directory  witk  tke  specified  name.  Choose  a 
different  name,  or  rename  tke  existiny  file. 

froin_0eld_elaaiifieation_doa_Dot_doiiiinat«.reply_elaa8ifieation 

Tke  contents  of  the  from  field  of  tke  sonree  messaye  is  copied  to  tke 
to  field  of  the  reply.  Tke  elassifieation  of  tke  reply  mnst  be  at  least  as 
kiyk  as  tke  from  fiM  of  tke  sonree. 

inbox_camiot.be.deleted 

Tke  messaye  file  "inbox"  cannot  be  deleted. 


inbox_eaiiiiot_bcjdowngraded 


Tkt  m€9»4§€  filt  “mias'*  cmhaI  i«  iitwmtrtdtd. 

iiifo_«ldre«Jut_empt]r 

No  oidreoooto  were  giotn  to  tko  Fonoori  /or  In/ormotion  eommond. 

info_MidnHee_eleannce.doesjBot_<k>nuiiate_ineg_elaMifieatioa 
A  for  info  oddreooee  ie  net  eUorod  to  reeewe  tkio  meeeeye.  It  woo 
forwordod  to  mo  one. 

maximum_clMaificntioa_doesjDOt_<lominntejDew_tcrmin<i_elnaaifica(ion 
The  termtne/  ee«Ro<  te  reetoooified  elove  ito  moximmm  leveL  Show  terminot 
imformotion  to  tee  tko  mooimmm  eioooifieotion. 

inss_enti7_alreaid7.deleted 

Thio  tnooofo  entty  koo  keen  deleted  or  moved.  To  remove  the  entry  permonently, 
exynnye  the  meeooye  file.  To  reetore  the  entry,  vndelete  it. 

nug_entryjDot_deleted 

Tkio  entry  eonnot  ie  undeleted  ieeouee  it  koo  not  been  deleted  or  moved. 

insg_file_clM8ifica(ion_does_ao(.doininate_insg_elMnficRtion 

Tke  eloeoifieotion  of  tke  duplieote  or  reoddreooed  meeooye  io  not  leoo  then  or 
eyuot  to  tkot  o/  tke  meoeoye  file  tkot  io  to  eontoin  it  Use  e  meeooye  file  of 
kiyker  eloeoifieotion. 

insg_file.claaeificRtion_does_nol_doimnate_oew_ms(_clM8ification 

Tke  e/eeeiy!eene«  of  the  meoeoye  to  ie  ereoted  moot  ie  leoo  then  or  eyuol 
to  tkot  of  tke  meeooye  file  tkot  ie  to  eontoin  U.  Uee  e  meeooye  file  of  kiyker 
eloeoifieotion. 

insg_file_claaBifica(ion_doe9_not.doiiiiaate_r«piy_clu8ification 

77ie  eloeoifieotion  of  tke  reply  meeooye  ie  not  leoo  tkon  or  equol  to  tkot  of  tke 
meeooye  file  tkot  ie  to  eontoin  it.  Uee  o  meeooye  file  of  kiyker  eloeoifieotion. 

iiuS_muat_beJbrm«l_to_be_xeaddreaBed 

Informol  meeeoyee  eonnot  ie  reoddreooed.  Forwerd  tke  meeooye  to  tke  deoired 
reeipiente.  If  ootkorized,  yon  moy  forword  tkio  meeooye  for  info. 

new.insg_file_cUanficntion_doe*jMt_doniins(e_nia8_91«_contenta 

A  meeooye  file  m«ef  ie  eloeeified  ot  leoet  oe  kiyk  oe  tke  eloeoifieotion  of  ito 
eontente.  To  downyrode  tke  file,  firet  remove  tke  meeeoyee  tkot  ore  oiove  tke 
deoired  eloeoifieotion. 

new_tfile_claHification_doe8_aot_domina(«_eontenU.clMMfica(ion 

A  test  file  moot  ie  eloeeified  et  leoet  oe  ki^  oe  ito  hiykeet  poroyropk.  To 
downyrode  tke  text  file,  remove  or  downyrode  tke  pertfrepA  firoL 

no_acceas_permitted 

You  do  not  hove  permieeion  to  perform  tke  requeeted  operotion  on  tke  epeeified 
entity.  If  Ike  requeeted  operotion  epeeified  more  tkon  one  entity,  you  look  tke 
neeeeeory  permieeion  for  ot  leoet  one  entity.  If  eutkorixed,  you  moy  ekonye  the 
permioeione. 

noJ’orwwdingL*ddre»_giren 
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No  oUnttttt  were  §nen  to  the  Forweri  for  Coordtmotion  or  Releooe  eommoni. 


nojnKhjeatityjadoto 

The  referenee  mode  ie  to  o  no»-esieteAt  directory,  metoeye  file,  text  file 
or  meeeofe.  Speeifyinf  «ii  ineorreet  meeeofe  numier  or  mioepeBed  file  »ome  eon 
Dioplop  the  directory  or  meueye  file  for  proper  ipelliny  end  meoeope  nnn^er. 

Bot_a_draft_mcauge 

Only  dreft  meteoyee  cm  ie  eeiit  or  forworded  for  releooe  or  eoordinetion.  A 
tent  meooeye  eon  ic  forworded  for  informotion  or  eetion,  or  reoddreooed. 

not^jtentjaesBOfp 

Only  tent  meteoyee  eon  he  forworded  for  information  or  eetion,  or  reeddreeeed. 
A  dreft  meeeeye  eon  he  tent  or  forwarded  for  releaee  or  coordination. 

only_sao_can_dupUy_other_uaers 

yii>«  mnet  have  SSO  at  one  of  yonr  enrrent  rolet  to  ditplay  information  ehont 
another  perton.  Add  SSO  at  a  enrrent  role  (if  enthorixed). 

paa8word_aot_vftli<i 

7iie  pateword  yon  typed  ie  not  eorreet.  The  paetword  woe  not  replaced. 

Recheck  Security  Hierarchy 

A  meeeaye  field  or  parayraph  hat  been  Meled  with  an  inappropriate  teenrity 
level.  The  overall  elaeeifieation  of  the  file  or  meetaye  mnet  dominate  the 
elaeeifieation  of  aU  the  contained  parayraphe  end  fieldt.  The  enrtor  it  poeitioned 
at  the  location  of  the  teenrity  error. 

releaae.^dressee_clearaaee.<ioe8.ao(.<loiiiioate.m8fs_claa8ification 
A  toe  release  addreeeee  ie  not  cleared  to  receive  thie  meeeaye.  It  woe 
forwarded  to  no  one. 

releaser jrole_required_tojsea<l.fonnal_messages 

Yon  mnet  have  releaeer  at  one  of  yonr  enrrent  rolee  to  tend  e  formal  meeeaye. 
Add  releaMr  at  a  enrrent  role  (if  enthorixed)  or  forward  the  meeeaye  for  releaee 
to  an  enthorixed  releaser. 

role3_aot_authorised 

The  role  ehoeen  u  not  m  yonr  enthorixed  role  eet.  Show  neer  information 
for  a  liet  of  anthorixed  rolet. 

security_officer_role_rsquired 

Yon  mnet  have  SSO  at  one  of  yonr  enrrent  r<det  to  perform  thie  operation.  Add 
SSO  at  a  enrrent  role  (if  anthorixed). 


syntax  error  line  a 

Thie  error  meeeaye  can  eiynal  eonntleee  poeeiUe  mietahee  in  the  meeeaye  or 
text  file  etmetnre.  The  detected  error  oeenred  n  linee  down  from  the  hleek 
her.  Common  errore  ineinde: 

mtMtfif  overaU  teenrity  level  (thie  ineindet  text  typed  efter  the  text 
field  Mel,  hnt  before  a  new  parayraph  Mel); 
modified  meeeaye  field  identifiere; 
more  than  one  parayraph  in  the  enhjeet  field;  and 
text  in  any  of  the  eddreee  fielde. 
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Tk*  ttmUmU  «/  Ut*  aubjMt  fUU  •/  <b«  <««re«  m*s$*t*  sr*  C9fud  to 
to«  mibjcet  fiM  of  tko  npif.  Tk*  ctoM^altoa  «/  rcp/y  iiim<  k*  ot 
/<M(  M  kt§k  M  toe  subject  ylcM  of  tko  seeree. 

Urget_tfikuelMrifieatioo_dow_|iot_doinia»U.^oaKc_tfilc.elMiific»tioB 
Tie  tost  fito  fom  ore  eopfi»§  to  meet  leee  e  e/eeeiyieaiieu  ot  looot  oo  ki§k 
00  tkot  of  tko  toot  file  you  ere  eepyiii#  from. 

teniuiial_ulre»d)r_esste 

A  tormmoi  of  tko  epeciyiei  ueuie  oiroodf  eoioto.  It  moot  ko  romoood  koforo  o 
oom  torm/mot  of  tkio  neme  eeu  ie  erootod. 

teniua»l_clMiiSc»tioB_<k>eejaot_dominste^mag;_elMwfic»tioB 

In  order  to  dioptof,  edit,  or  repif  to  o  ouooofo,  tko  oereon  eloooifieotion 
moot  ko  ot  looot  00  ki§k  oo  tkot  of  tko  opooifUd  nuooopo.  Roeloooifp  the  eereeu 
to  tko  opproprioto  level. 

teniiinjkl_cUesifiestion.<loes_|iot_doininate_^ew_in8g_elaaBificutioB 

Tie  tormmoi  oeroo*  eloooifieotiom  moot  ko  ot  looot  oo  ki^  oo  tkot  of  tko  moosopo 
to  ko  ereetoi.  Roeloooifp  tko  oereon  to  tko  opproporioto  level. 

teniiinal_elaasifieatioB_doe8_iiot_<loLanate_iaew_tSle_elaaeificution 

Tie  tormmoi  oereon  e/eeetyieelMU  muel  le  e<  looot  oo  kipk  oo  tkot  of  tko  text 
file  to  ko  erootod.  Roeloooifp  tko  oereon  to  tko  opproprioto  level. 

teniuiul_clseiific«tioii^doe8jot^domiiMte_tfile_cliusificutioa 

Tko  tormmoi  oereon  eloooifieotion  moot  ko  ot  looot  oo  kipk  oo  tkot  of  tko  text 
fito  to  ko  dioploped  or  edited.  Roeloooifp  tko  oereon  to  tko  opproprioto  level. 

tonuaxljiooo.jtoijexjxk 

No  terminol  witk  tko  opoeifiod  neme  oxioto.  Skow  torminoi  informmtion.  Ckoek 
tko  opoOinp. 

toxtJUojtypoJxjaotjeompntihlv 

Onlp  text  filoo  of  tko  some  tppo  eon  ko  oppondod  to  ooek  otkor.  Text  file  tppoo 
ore  poropropk,  poropropk  Hot,  ond  oddrooo  Hot  Tko  To,  From,  ond  Ce 
moooopo  fioldo  eon  onlp  eontoin  on  oddrooo  Hot  Tko  Subject  field  eon 
onlp  eontoin  o  poroprpk.  Tko  Text  field  eon  eontoin  o  poropropk  or  o  poropropk 

Hot 

tfile_ela«ification_<loes_aot_<ionuiiate_^eld_ciairificntion 

Tie  c/eeeiySeelMn  of  tko  text  file  moot  ko  ot  looot  oo  kipk  oo  tkot  of  tko 
moooopo  fidd  to  ko  copied. 

tfile_dir_elMsifiestion_does_Bot_(lonua«te_iiew.tfile.elHiific»tion 

A  text  fito  eonnot  ko  erootod  or  roeloooifiod  to  o  level  prootor  tkon  tkot 
of  tko  eontoininp  diroetorp. 

tfile_dir_eIaasific»tion_does,jiot_domiiMte_t81e.elMiifie»tion 

Tie  text  file  to  ko  dnplieotod  lee  e  eloooifieotion  prootor  tkon  tkot  of  tko 
intondod  torpot  diroetorp.  Tko  diroetorp  eonnot  eontoin  tUo  file. 

tfile.directoiy.does^ot.exist 
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A  Arcelorf  of  tkia  mhu  ioto  mot  osiot.  Chock  tko  oftUim§. 

to,fi»l<i_addreMti_cle>r«nce_doei_pot_doininfct»^mH_cliMific»tkMi 
Omo  of  tko  oddroooooo  in  tko  To  fioid  i$  mot  doored  to  roeoioo  tkio 
moooofo.  It  woo  oomt  to  m  o««.  Edit  tko  moosofo  ofpropriotoif. 

tojficld_empty 

No  oddrooooo  wore  gioom  m  Uio  To  field  of  tko  moooogo.  It  woo  oomt  to 
mo  omo.  Edit  tko  meooogo  opfropriotolf. 

voerjolnodyjadoto 

A  moor  if  tkot  ««iiw  if  olroodf  omtkorixod  to  moo  tko  MMS.  Rooooifm  tko  mew  moor 
omotkor  MiiM  or  remove  tko  evrreiil  moor  from  tko  ofotom. 

user_does_Dot.exis( 

Omo  or  more  of  tko  eddreeeee  if  mot  o  molid  moorid.  The  tHooeofO  mtoo  not  oomt 
orformmrdod.  Cheek  tko  opoUimf  omd  eopitolixmtiom.  Uoorido  eonteiii  mo  Uomko 
or  pmmetmmtiom. 

uaen.th»t_we_eurTenUyJo(Kcd_^_ejuuiot.be_d«troyed 
Am  SSO  eommot  dootrof  o  moor  who  if  logfod  m. 

Key  Words  snd  Abbreviations 
addrea 

A  moorid  domotimf  tko  poroom  or  orgomixotiom  to  mtkom  o  tmoooogo  if  to  io  oomt 
orforwordod.  Im  proetiee,  om  imdividmot’o  loot  memo,  ia  /over  eooo,  io  fregmomtlp 
mood  00  hio  moorid. 

addroi  list 

A  liot  of  oddrooooo  ooporotod  if  Uomko.  Am  oddrooo  Hot  com  oppoor  m  a  text 
file,  0  moooogo  field  (To,  Co)  omd  im  Forword  end  Reoddreoo  eommomdo. 

dir 

Diroetorf. 

directory 

Either  o  moooogo  file  diroetorf  or  text  file  diroetorf,  dopomdimg  om  the  eomtoxt 
dominates 

‘Grootor  lAaa  or  egmol  to '  ta  tko  momol  oomoo  oppliod  «dea  eomporimg  ooemritf 
lomolo.  For  oxomplo,  Top  Sverat  domimotoo  Secret;  Top  Secret  white 
domimotoo  Top  Secret;  tel  Top  Secret  white  dooo  mot  domimoto 
Top  Secret  red. 

entity 

A  doto  otrmetmro  ta  tko  MMS  tkot  koo  «a  oxpHeit  eloooifieotiom.  Diroetorioo, 
fiUo,  moooogoo,  moooogo  fioldo,  porogropk  lioto,  porogropho,  omd  oddrooo  lioto 
are  emtitioo. 

field 

Moooogo  field. 
file  name 

Eitkor  0  moooogo  file  memo  or  text  file  name,  dopomdimg  om  tko  eomtoxt. 


MtM§t  fiU. 


paragraph 

i4a  enlitf  eotui$tm§  of  oac  ieenritf  Mel  emJ  text. 
paragraph  list 

An  entitf  eoneietimf  of  one  overdl  eeenritf  Met  end  one  or  more  peregrepho. 
Eeek  peregrepk  m  tke  hot  kee  ite  own  oeenritp  MeL  Tke  overall  eeenritp  Mel 
mmet  dominate  tkat  of  eaek  paragrapk  ia  tke  liat. 

tfile 

A  text  file,  via  entitp  tkat  esa  kold  a  eingle  paragrapk,  paragrapk  list,  or 
addreea  liat  Tke  elaeeifieation  of  tke  text  file  mast  dominate  tkat  of  its  contents. 
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The  Secure  MMS  M2  Prototype  Tourguide 

This  exercise  serves  as  an  introduction  to  the  M2  rapid  prototype  of  the  Secure  MMS  pny 
ject.  The  user  interface  of  this  prototype  will  help  guide  you  through  this  exercise  by  prompting 
you  for  any  needed  information.  However,  there  are  a  few  things  of  which  you  should  be  aware 
before  you  start; 

A.  When  typing  security  levels,  just  type  a  “T”  for  TOP  SECRET  to  appear,  “S”  for 
SECRET,  "C”  for  CONFIDENTIAL  and  “U”  for  UNCLASSIFIED  (lower  case  t^.c.u  are 
also  accepted).  When  compartment  names  follow,  separate  them  only  by  blanks.  No 
blank  is  needed  preceding  the  first  compartment. 

B.  The  function  keys  are  assigned  certain  tasks.  You  should  have  received  a  two-sided  tem¬ 
plate  describing  these  keys.  One  side  gives  the  meaning  of  the  function  keys  in  the  normal 
case;  the  second  side  describes  the  meaning  of  the  function  keys  within  the  prototype’s 
editor.  Within  the  editor,  the  arrow  keys  can  be  used  to  move  the  cursor,  and  the  back¬ 
space  key  deletes  the  current  character. 

C.  Unless  the  prototype  Mb*  for  the  return  key  to  be  entered,  it  is  not  necessary  to  do  so. 

D.  If  you  make  a  mistake  while  typing  a  command,  you  can  use  the  ABORT  key  (see  tem¬ 
plate)  to  cancel  the  current  command.  If  the  prototype  detects  that  you  have  typed  an 
erroneous  key,  it  will  ignore  that  keystroke  and  cause  an  audible  ieep. 

The  tour  is  set  in  the  revolutionary  war  era;  you  will  play  the  part  of  Benjamin  Franklin. 

Please  complete  the  following  tasks: 

1.  Login  using 

USER:  franklin 

PASSWORD;  fireplace 

SX7UR1TY:  T  white 

ROLES:  user 

2.  Display  each  of  the  messages  in  Franklin’s  file  inbox. 

What  is  the  citation  number  of  the  message  you  cannot  view? _ 

3.  Display  the  message  file  directory. 

4.  Move  the  message  in  inbox  about  Benedict  Arnold’s  behavior  to  the  message  file  called 
rumors. 

Note  that  inbox  is  classified  at  user’s  clearance  level,  but  messages  do  not  inherit 
this  classification  when  moved  to  other  files. 

Was  the  mess  successful?  __ 

5.  Forward  the  same  message  for  ACTION  to  Washington  (Hint:  look  at  the  Stniinf  Msfs 
Menu). 

0.  Copy  the  message  in  inbox  about  Adams’  delegation  of  work  to  the  message  file  admin. 
Was  the  copy  successful? _ 


7.  Cr«»te  a  FORMAL  mcMage  with  the  aceurity  level  of  CONFIDENTIAL  in  the  meeeage  file 
admin  and  enter  some  fields.  (Don't  forget  to  fiip  over  your  function  key  guide  to  the  edi¬ 
tor  side.)  Try  entering  things  like  a  paragraph  with  a  classification  higher  than  the  secu¬ 
rity  level  of  the  message. 

8.  Display  the  text  file  directory  and  any  text  files  in  it. 

9.  Copy  the  text  file  into  the  text  field  of  the  message  you  just  created. 

10.  Print  this  draft  formal  message. 

11.  Send  the  formal  message. 

Was  the  send  successful?  ___ 

12.  Display  the  user  information  on  franklin  (Hint:  look  at  the  Seenritf  Menu). 

13.  Add  the  re/esser  role  to  your  current  set  of  roles. 

14.  Send  the  formal  message. 

Was  the  send  successful? _ 

15.  Raise  the  current  classification  of  the  terminal  to  T  red  white.  Display  your  inbox. 

b  there  anything  new? _ 

18.  Reply  to  the  message  from  adams  with  an  INFORMAL  message. 

17.  Logout  (or  continue  to  experiment  as  you  wish). 

Thank  you  for  your  assutance  in  this  project. 

Please  write  any  comments  or  suggestions  in  the  space  below: 
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